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ABSTRACT 


In a phased mission, the functional organization 
of the system changes during consecutive time periods, 
which introduces analysis complexities not present 
with just a single phase. This occurs since the 
performance of a particular component in one phase of 
the mission is not independent of its performance in 
another phase. In this paper, an example is analyzed, 
largely with graphical techniques and diagrams, so as 
to avoid the complicated mathematics which 


characterize much of the existing methodology. . 
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In a phased mission, the functional organization of the 
system changes during consecutive time periods. Some 
examples of systems which are reguired to perform a phased 
mission are space vehicles, public safety systems, and 
military weapons systems. Reliability analysis for a phased 
mission encounters complexities not present with just a 
single phase, Since the performance of a particular 
component in one phase of a mission is not necessarily 
independent of its performance in another phase. Ina 
recent paper, Bell [1975] modified and extended existing 
methods for the analysis of phased missions, so as to 
include an operational readiness (OR) phase, during which 
the system functions solely to maintain its readiness for 
later phases of active operation. The results were then 
extended to systems which perform complex nulti~objective 
missions. This type of model is particularly applicable to 
strategic weapons systems. 


The work in this paper follows very closely the work of 
Bell [1975]. An example is analyzed, largely with graphical 
technigues and diagrams, so as to avoid the complicated 
mathematics which were required in the development of the 


methodology of phased mission reliability analysis. 


— 





A hypothetical submarine-launched ballistic missile 
system (SLBM), which was motivated by the Navy's Fleet 
Ballistic Missile system, was introduced by Bell { 1975]. 
That hypothetical system is extended in this example to 
include three missiles, each of which has a different 


objective. 


The SLBM system consists of the following components: 

e the submarine (S) which provides propulsion, 
Stability, power, and household services. 

»e the inertial navigation subsystem (N) which 
provides information on platform position and orientation. 

»e the communication subsystem (C) which provides 
the link between the submarine and its command center. 

» the fire control subsystem (FC) which provides 
trajectory information to each missile guidance computer. 

s the ejection subsystems (E1,E2,E3), one for each 
missile, which launch the missiles from the submarine while 
the latter is subnerged. 

e the guidance component of each missile (G1,G62,6G3) 
which computes and transmits to the rocket engines the 
control commands required to maintain the trajectory stored 
within its memory, and triggers stage separation. 

»s two internal power sources for each missile (VP1 
and VS1, VP2 and VS2, VP3 and VS3). 

a the first- and second-stage rocket engines of 
each missile (RF1 and 8S1, RF2 and RS2, RF3 and RS3). 

» two first-stage igniters for each missile (IP1 
ard fs" IP2 and 1S2, IP3 and IS3). 

e the second-stage igniter of each missile (J1, J2, 





Jan. 
»e the warhead of each missile (W1, W2, W3). 


The SLBM system has an operational readiness (OR) phase, 
followed by five active phases for each objective. The 
operational characteristics of the system can be summarized 
as follows: 

«s During the OR phase the submarine patrols its 
assigned area, maintaining current position information with 
the inertial navigation subsysten. Should the inertial 
component fail, then position information can be obtained 
periodically from a navigation satellite, which provides the 
data necessary for calibration after repairs are completed. 
The communication subsystem is used continually during this 
phase for routine ship-shore message traffic. The fire 
control subsystem is exercised periodically during the OR 
phase tc monitor its status. Similarly, the performance of 
the missile power sources and guidance components are 
checked through routine tests. All components which are 
monitored can be repaired or replaced if found to be failed 
during the OR phase. Other failures go undetected. [In 
order for the system to be ready to commence active 
Operations, it must have submarine services and current 
navigation information available, and it must be able to 
receive the launch command via the communication subsysten. 

a The fire control phase for the first objective 
commences when a launch command is received. All maintenance 
actions cease, and launch preparations commence. The fire 
control subsystem transmits trajectory data to the guidance 
component of the first missile, and the submarine is 
positioned fOr launch. The fire control phases’ for 
subsequent objectives proceed in succession. 

a During the launch phase for each missile, the 
Submarine 1s held stable while the aissile is ejected, 
severing its link with the platform and causing it to switch 


to internal power. The power sources, although activated, 





Oo 


are not reguired to supply power during this phase. 

« The booster phase starts when the first-stage 
engine ignites. This occurs as each missile breaks through 
the surface of the water. The missile is then boosted along 
its trajectory. The port igniter can be powered only by the 
port power source, and the starboard igniter only by the 
starboard power source, but one igniter is sufficient to 
fire the engine. The guidance component, which can take 
power from either source, must function throughout the 
phase. 

e During the flight phase, the second-stage 
igniter, second-stage engine, guidance component, and at 
least one power source must function. 

s Shutdown of the second-stage engine marks the 
beginning of the terminal phase during which the warhead 


follows a ballistic trajectory to its target. 
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III. PROBLEM ANALYSIS 


There are two goals in this example. The first is to 
determine the reliability of the SLBM system with respect to 
each particular objective, that is, the probability that 
each target is destroyed. The second goal is to analyze the 
overall success of the total mission. 


A. PHASE SEQUENCE DIAGRAM 


As a tool in the analysis of this example, the phase 
sequence diagram is used. For the SLBM system, the phase 
sequence diagram is Shown in Fig 1. It graphically depicts 
the organizational sequence and numbering of phases. Each 
phase is numbered with two digits. Por example, the launch 
phase of the first missile, which has objective 1, and is 
active phase 2, is nmumbered phase 12. Following phase 12, 
the phase sequence continues Simultaneously up the first 
branch for objective 1, and along the trunk for successive 
objectives. 


Be. PHASE BLOCK DIAGRAMS 


The functional organization of components within each 
phase of the mission iS graphically represented by a block 
diagran. Fer each phase, the block diagrams which 
correspond to the description of the operational 
Characteristics of the SLBM system are shown in Fiq. 2. 
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1. Cut Cancellation 


ane Se a = 2S == =e 





It is desireable, at this point, to simplify the 
block diagrams by a procedure, suggested by Rubin [1964] and 
Weisburg and Schmidt [1966], called cut cancellation. ' The 
cancellations which are permitted by this technique are 
shown in Fig 3. A simple rationale for these cancellations 
can be illustrated referring to Fig 3. For example, it can 
be seen that component G1 is required in the flight phase of 
objective 1 (phase 14), and that if it is not functioning 
through the end of that phase, objective 1 can not be 
accomplished. It can be reasoned that since the requirement 
that G1 functions in phase 14 includes the requirement that 
it does not fail in phases 11 or 13, Gi can therefore be 
eliminated from further consideration in those earlier 
phases. It is said that G1 first becomes relevant in phase 
14. 


A somewhat more complex situation occurs in the case 
of the submarine (component S), which is required for all 
three objectives. With respect to objective 1, S first 
becomes relevant in phase 12; with respect to objective 2, 
in phase 22; and with respect to objective 3, in phase 32. 
Cut cancellation is thus permitted, for component S, in 
phases 00, 11, 21, and 31. 


The resulting block diagrams, following cut 


cancellation, are shown in Fig. 4. 
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2. transformation o 


lth 


the Multi~phase Objective 





The essence of the analysis of phased mission 
reliability lies in the technique, suggested by Esary and 
Ziehms [1975], of transforming a system with several phases 
into an equivalent, synthetic, single-phase systen. This 
procedure makes it possible to compute reliability by 


standard methods. 


In-as-much as the performance of each component ina 
particular phase is dependent on the performance in earlier 
phases, the transformation involves replacing original 
components with pseudo-components which represent 
performance in each phase independent of performance in all 


other phases. 


A shortcoming of this technigue is that the 
transformation generates a large number of 
pseudo-components, which may be unwieldy. Recognizing this, 
Bell [1975] suggested a procedure for the reduction of 
pseudo-components in a manner which retains the desirable 


characteristics of the transformation. 


The procedures of Esary and Ziehms [1975] and Bell 
[1975] are modified for direct graphical application as 
follows: 


a. Having already performed cut cancellation, 
which resulted in the phase block diagrams of Fig 4, 
identify components which appear in more than one phase. [In 
the SLBM system, they are FC, S, VP1, VS1, VP2, VS2, VP3, 
and VS3. Now, as shown in Fig 5, circle the second and 
Subsequent appearances of each of those components. These 


are the candidates for pseudo-component expansion. 
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Figure 5 - CANDIDATES FOR PSEUDO-COMPONENT EXPANSION 





b. Replace each of the uncircled components with 
a pseudo-component numbered with the phase number where it 
first appears. For example, replace the blocks 


in phase 12, with the blocks 


Each of these blocks now specifically - represents a 
pseudo-component which is required to survive only through 


the end of the phase with which it is numbered. 


Cc. Replace each of the circled components with 
an equivalent series arrangement of independent 
pseudo-components. Use lower case letters plus' phase 
numbers to represent a pseudo-component which is required to 
function only during one phase. This step in the procedure, 
referred to as - pseudo-component expansion, is best 
lllustrated by the following example: The block 


is replaced in phase 21 by 


19 





It should be clear that the series arrangement of FC11, 
which functicns only through the end of phase 11, fc12, 
which functions only during phase 12, and fc21, which 
functions only during phase 21, is the equivalent, in phase 
21, to the original component FC functioning through the end 
of that phase. It should also be clear that the 
pseudo-components are independent of one another. The 
results of transforming the phase block diagrams are shown 


ime Fig 6. 
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3. osaspelioficaticna 


The phase block diagrams can now be connected to 
each other, in series, to create synthetic, equivalent, 
Single-phase systems. However, before proceeding, it is 
desireable to simplify the block diagrams utilizing a 
procedure properly kKanowa as idempotent cancellation. This 
can be done whereever a particular block will appear in 
series with itself. Graphically, the idempotent law says, 


for example, that 


The procedure for simplification is as follows: 

ae Referring to Fig 6, identify those 
nseudo-components, and those particular groups of 
pseudo-components, which would be in series with themselves 
aig successive transformed Phase block diagrams were 
connected in series. These are candidates £os 
Simplification. In the SLBM systen, they are $12, s21, s22, 
PFC11, fc12, and fc21. Note that VP13, for example, is not a 
candidate since it is in distinct and different groups of 


pseudo-components in phases 13 and 14. 
b. Remove the second and subsequent appearances 


of each of the candidates. The resulting transformed and 


Simplified phase block diagrams are shown in Fig 7. 
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It should be noted that following this simplification, the 
transformed phase block diagrams are no longer, 
phase-by-phase, exact equivalents of the original phase 
block diagrams. However, when combined in series, as is 
done in a subsequent step, the resulting synthetic, 
Single-phase systems are equivalent to the original 


multi-phase systems. 


C. RELIABILITY OF PSEUDO-COMPONENTS 


The first goal im this SLBM example, as stated earlier, 
is to determine the reliability of the system with respect 
to each particular objective; that is, the probability that 
each target is destroyed. In order to proceed, it is first 
necessary to discuss the reliability of the 


pseudo-components. 


Represented by either upper case or lower case 
letters, the two different types of pseudo-components have 
reliabilities which are of different and distinct natures. 
For the pseudo-components represented by lower case letters, 
the reliability is the probability that the pseudo-component 
wili function only daring the particular phase indicated. 
Thought of another way, it is the conditional probability 
that the original component will function during that 
particular phase, given that it was functioning at the start 
of that pnase. This conditional probability is referred to 


as conditional compoment phase reliability. 
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2. Unconditional Coaponent Reliability 


The reliability of the pseudo-components represented 
by upper case letters is tue probability that the 
pseudo-component survives through the end of the particular 
phase indicated. This is the equivalent of the 
unconditional probability that the original component 
survives through the end of the first phase in which it is 
relevant. This unconditional probability is referred to as 
unconditional component reliability. It might be noted that 
the availability of each component at the commencement of 
active operations is included in the unconditional component 


reliability. 
Hypothetical values for the reliability of each of 


the pseudo-components are shown in Fig 8 next to each 


respective block. 
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D. OBJECTIVE RELIABILITY 


The reliability of the SLBM system with respect to each 
objective can be determined by working with the transformed 
and simplified phase block diagrams of Fig 8. The 
procedure consists of two parts: the first is construction 
of the synthetic, equivalent, single-phase block diagram of 
pseudo-components for each objective; the second part is 
evaluation of the objective reliability using the block 


diagram and given values for pseudo-component reliabilities. 


1. Objective Block Diagrams 


The procedure for constructing the objective block 
diagrams is actually a continuation of the transformation 


process, and consists of the following steps: 


a. Identity the sections of the phase sequence 
diagram which are relevant to each objective. This step is 
illustrated in Fig 9, the shaded portions of the phase 


sequence diagrams representing the relevant phases. 


b. Connect, in series, the transformed phase 
block diagrams of all of the identified phases to form the 
Objective block diagram. For example, the block diagram of 
objective 2 is shown in Fig. 10. 
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Due to the presence of some pseudo-components more 
than once (for example, VP23 and V¥S23 in Fig 10), the 
objective block diagrams can not simply be treated as a 
series of independent modules, which would have made 
Numerical evaluation straight-forward. AS an alternative, © 
it 1s possible to employ a well-known graphical technique of 
structural reliability, which is based on a procedure called 
pivotal decomposition (see, for example, Barlow and Proschan 
fr75 }). 


This technique is best illustrated by example, and 


consists of the following steps: 


ae Pull all of the independent blocks to the 
front of the block diagran. In Fig 10, these are C00 
through E22, RF23, and G24% through wW25. This leaves the 


dependent sections, which in the case of objective 2 are 





b. Pivot on one of the pseudo-components which 
cause the dependence, say VP23. To accomplish this, split 
the block diagram into two branches by considering the block 


diagrams which result if 
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(1) ¥VP23 always functions: 





(2) ViP23 always fails: 


Cc. Since dependence still remains in the "VP23 
always functions" branch, pivot again, this time on VS23. 
Split the "VP23 always functions" branch into two branches 
by considering the block diagrams which result if, in 
addition to VP23 always functioning 


(1) ¥S23 always functions: 





3) 





(2) V¥S23 always fails; 


Since all branches now contain independent modules, no more 
pivoting is reguired. The result of these steps is 
lllustrated in Pig 11. As shown in the figure, just beyond 
each pivot pcint and just below the branch lines, label each 
branch by a description of the event along that branch, such 
as "VP23 functions." 
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d. Above each branch line, in parentheses, write 
the probability of the occurance of the event along that 
branch. For example, the probability that VP23 functions is 
just its reliability, and the probability that it fails is 


one minus the reliability. / 


e. Above each pseudo-component block, write the 
probability of that block functioning’ (the reliability of 


the pseudo~component). 


f. The blocks in Fig 11 can be reduced into 
modules to simplify subsequent calculations. This is shown 
in Fig 12, where modules are indicated by dotted lines, and 


the reliability of each module is indicated in parentheses. 


g. Multiply all of the probabilities 
(reliabilities) leading to the end of each branch, and write 
down the product. This is illustrated in Fig 12 by the 


numbers in brackets. 

h. The reliability of objective 2, denoted by 
R2, can now be written down by summing the probabilities of 
all of the branches. Thus 


R2 = .553 


Similarly, the reljabilities of objectives i and 3 can be 
obtained. The results are: 


R1 -606 


R3 2905 


34 





zoo!) 


ms iii ie i eee Ss = 


Biles 
Be 


S72 


$22 


it 


Gli 
§21 


FE 


— er sw ow ee ee eee es 


ati a | 


i 


a ~ FT 
a Se ale ie i oe oe ae 
im | » | wo pol | 
~ N = 
11 Si sisii att si] s | 
—s > > fe | a > ee > | 
! 
ee ee ——-— —- | = 
{ 
| 
——— | | | 
io | ae ie , 
all ~w ST | NI wr | | 
oi; oO aan ce | ol 
7 4 it ; | ae | 
~; { | - =e : 
nea 5 Sa, 3 | 
we ee ee eee i -_— = - [ 
¢ | 
oO 
ts an | , 
~* 
7iNG o/~ NT ow 
oO,\e Se I} o fl 
SO \G : Ce = 
oO Sy [ 3 
LI nas 
o> > 
Ww Vv 
6k 
J 
oO 
\ x? oN nO 
GNE, S = 
ie Ca a % 
: my 
JN AY 
— fr 


Figure 12 - REDUCTION INTO MODULES 
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E. MISSION SUCCESS 


Having determined@ the reliability or probability of 
accomplishing each objective, the final goal is to analyze 
the overall success af the total mission. This aspect of 
the analysis may be achieved by answering the following 


questions: 


(1) What is the probability that any particular 


number of objectives are accomplished on a mission? 


(2) What is the expected or average number of 


objectives that will be accomplished per mission? 


ic uccessful Mission Outcomes 





To begin answering theSe questions, first the 
possible successful outcomes o£ a mission must be 


considered. ‘ae accomplished objectives could be: 


objective 1 alone 
objective 2 alone 
objective 3 alone 
objectives 1 and 2 
objectives 1 and 3 
objectives 2 and 3 
objectives 1, 2, and 3 


The probability of accomplishment, or reliability of 
each objective alone has already been determined. Following 
the same procedures which produced R1, R2, and R3, the joint 
objective reliabilities can be found. It should be noted 
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that in set theory terminology, the joint objectives are 
the intersections of the events which are single onjectives. 
Determining joint objective reliabilities consists of the 


following steps: 


a. Construct the joint objective block diagram 
by connecting, in series, the transformed and simplified 
phase block diagrams of the relevant phases, which in the 
case of joint objective 1 and 2, for example, are indicated 


by shading in the phase sequence diagram as follows: 


b. Evaluate the joint objective reliability 
which is denoted in the case of joint objective 1 and 2, for 


example, as Rt2. 


The possibide successful outcomes and the 
corresponding phase seguence diagrams are summarized in 
Fig 13. A convenient tool from set theory, the Venn 
diagram, is also shown for each outcome. The numerical 
values for objective and joint objective reliabilities in 


this example are also shown. 
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The probability that any particular number of 
objectives are accomplished on a mission can be written down 
directly with the aid of the corresponding Venn diagrams. 
These quantities, which correspond to varying levels of 
mission success, are tabulated in Fig 14. It is noted that 
in a more general application, where Venn diagrams might not 
apply, other straight-forward approaches may be used (see 
Bell [1975], for example). 
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Using the probability of each mission success level, 
the average or expected number of successes per mission can 
be determined by weighing each number by its probability of — 
occurance and then adding. This is illustrated in the 


following result: 


Expected number 
of objectives 


accomplished (0) (250) + (1) (2145) 


+ (2) (.296) + (3) (.309) 


Alternative measures of mission success could be 
examined in a Similar manner. Particularly, objectives 
could be weighted as to importance, and Specific 
combinations of accomplished objectives could be considered. 
Bell {1975], for example, suggested an approach which could 


be used in the case of a complex mission success criteria. 
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